Ambient Mesh
Ambient Mesh is a next-generation, sidecar-less service mesh designed to simplify security, connectivity, and observability for cloud-native workloads. It enables teams to secure and connect applications without modifying application code or adding operational overhead. Ambient Mesh provides zero-trust, SPIFFE-based security with end-to-end workload encryption. Built-in observability tools deliver distributed tracing, logs, and real-time performance insights. The platform supports advanced traffic control features such as routing, failover, and blue-green deployments. Ambient Mesh allows organizations to migrate from traditional sidecar-based meshes with zero downtime. By reducing complexity and resource usage, it helps teams operate more efficiently at scale.
Learn more about Ambient Mesh
Kuma
The open-source control plane for service mesh, delivering security, observability, routing and more. Built on top of Envoy, Kuma is a modern control plane for Microservices & Service Mesh for both K8s and VMs, with support for multiple meshes in one cluster. Out of the box L4 + L7 policy architecture to enable zero trust security, observability, discovery, routing and traffic reliability in one click. Getting up and running with Kuma only requires three easy steps. Natively embedded with Envoy proxy, Kuma Delivers easy to use policies that can secure, observe, connect, route and enhance service connectivity for every application and services, databases included. Build modern service and application connectivity across every platform, cloud and architecture. Kuma supports modern Kubernetes environments and Virtual Machine workloads in the same cluster, with native multi-cloud and multi-cluster connectivity to support the entire organization.
Learn more about Kuma
Control Plane
Control Plane is the unbreakable platform for running production workloads. It runs serverless, standard, stateful, and cron workloads natively on AWS, GCP, and Azure, VM workloads on Managed Kubernetes locations, and workloads on your own infrastructure or on premises, active-active across regions and clouds. The 99.999% availability SLA applies to workloads running at least two replicas in at least two locations.
Control Plane handles Day 2 operations for you, including autoscaling, Capacity AI right-sizing, built-in observability, and security, with no Kubernetes cluster to operate. Universal Cloud Identity gives workloads access to 600+ services across AWS, GCP, and Azure with no long-lived cloud keys in your code.
Customers typically cut compute costs 30 to 50 percent compared with running directly on AWS, GCP, or Azure. Control Plane is PCI DSS Level 1, SOC 2 Type II, HIPAA, and GDPR compliant.
Learn more about Control Plane
Tetrate
Connect and manage applications across clusters, clouds, and data centers. Coordinate app connectivity across heterogeneous infrastructure from a single management plane. Integrate traditional workloads into your cloud-native application infrastructure. Create tenants within your business to define fine-grained access control and editing rights for teams on shared infrastructure. Audit the history of changes to services and shared resources from day zero. Automate traffic shifting across failure domains before your customers notice. TSB sits at the application edge, at cluster ingress, and between workloads in your Kubernetes and traditional compute clusters. Edge and ingress gateways route and load balance application traffic across clusters and clouds while the mesh controls connectivity between services. A single management plane configures connectivity, security, and observability for your entire application network.
Learn more about Tetrate